note 76079 deleted from security.globals by danbrown
| From: | danbrown@php.net | Date: | Thu, 15 Jan 2009 16:25:57 +0000 |
| Subject: | note 76079 deleted from security.globals by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149271@lists.php.net to get a copy of this message | ||
Note Submitter: Scott
----
I couldn't get any of the suggested ways to disable register_globals to work in what I believe
to be an Apache environment, where even phpinfo() is disabled. I finally had to resort to
foreach(array_keys($_REQUEST) as $field)
{
unset(${$field});
}
to get the $_REQUEST array without auto-setting all the request variables. I'm somewhat new to
the whole PHP thing and wonder if there is a downside to this that I don't see.